Kali Metasploit MCP Server

Instructions

Implementation Reference

• src/index.ts:328-362 (handler)

  Handler for get_exploit_info tool: extracts exploitPath argument, executes 'info ${exploitPath}' command in msfconsole using executeMsfCommand helper, returns JSON with success/info or error.

  case "get_exploit_info": {
    const { exploitPath } = args as { exploitPath: string };
  
    try {
      const info = await executeMsfCommand([`info ${exploitPath}`]);
      return {
        content: [
          {
            type: "text",
            text: JSON.stringify(
              {
                success: true,
                exploitPath,
                info,
              },
              null,
              2
            ),
          },
        ],
      };
    } catch (error: any) {
      return {
        content: [
          {
            type: "text",
            text: JSON.stringify({
              success: false,
              error: error.message,
            }),
          },
        ],
      };
    }
  }

• src/index.ts:109-123 (registration)

  Tool registration in the tools array, including name, description, and inputSchema defining required 'exploitPath' string.

  {
    name: "get_exploit_info",
    description: "Get detailed information about a specific exploit",
    inputSchema: {
      type: "object",
      properties: {
        exploitPath: {
          type: "string",
          description: "Full exploit path (e.g., 'exploit/windows/smb/ms17_010_eternalblue')",
        },
      },
      required: ["exploitPath"],
    },
  },
  {

• src/index.ts:112-121 (schema)

  Input schema for get_exploit_info: requires 'exploitPath' as string.

  inputSchema: {
    type: "object",
    properties: {
      exploitPath: {
        type: "string",
        description: "Full exploit path (e.g., 'exploit/windows/smb/ms17_010_eternalblue')",
      },
    },
    required: ["exploitPath"],
  },